SB2016041214 - Denial of service in Drupal Drupal
Published: April 12, 2016 Updated: September 14, 2016
Security Bulletin ID
SB2016041214
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Denial of service (CVE-ID: CVE-2016-3162)
The weakness allows attackers to cause denial of service on the target system.The vulnerability is caused by attacker's influence on files uploaded by a valid user. A malicious user can read and change the links to the uploaded files locating in unsubmitted forms. Continuous attacks can lead to complete blockage of the uploaded files and deleting of temporary files.
Successful exploitation of this vulnerability results in denial of service on the vulnerable system.
Remediation
Install update from vendor's website.